ROOT-APP-PYPI-CVE-2026-48524 CVE-2026-48524 in rootio-PyJWT - Patched by Root

Root has patched CVE-2026-48524 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48523 CVE-2026-48523 in rootio-PyJWT - Patched by Root

Root has patched CVE-2026-48523 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48525 CVE-2026-48525 in rootio-PyJWT - Patched by Root

Root has patched CVE-2026-48525 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48522 CVE-2026-48522 in rootio-PyJWT - Patched by Root

Root has patched CVE-2026-48522 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in rootio-pyjwt - Patched by Root

Root has patched CVE-2026-48526 in the rootio-pyjwt package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in rootio-PyJWT - Patched by Root

Root has patched CVE-2026-32597 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...

Oracle Linux 10 : fence-agents (ELSA-2026-19138)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19138 advisory. - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 Tenab...

Oracle Linux 10 : fence-agents (ELSA-2026-25902)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25902 advisory. - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 Tenable has...

fence-agents security update

4.16.0-21.2 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 4.16.0-21.1 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668...

EulerOS 2.0 SP12 : python-jwt (EulerOS-SA-2026-2557)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

PYSEC-2026-1814 PyJWT Issuer field partial matches allowed

Summary The wrong string if check is run for iss checking, resulting in "acb" being accepted for "abc". Details This is a bug introduced in version 2.10.0: checking the "iss" claim changed from isinstanceissuer, list to isinstanceissuer, Sequence. diff - if isinstanceissuer, list: + if...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

RHEL 9 : fence-agents (RHSA-2026:35835)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:35835 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 9 : fence-agents (RHSA-2026:35837)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:35837 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...

Security update for python-PyJWT (important)

openSUSE security update: security update for python-pyjwt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21095-1 Rating: important References: bsc1266798 bsc1266799 bsc1266800 bsc1266801 bsc1266802 Cross-References: CVE-2026-48522 CVE-2026-48523...

SUSE SLED15 / SLES15 Security Update : python-PyJWT (SUSE-SU-2026:2627-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2627-1 advisory. This update for python-PyJWT fixes the following issues - CVE-2026-48522: PyJWKClient passes URI arguments...

fence-agents security update

4.10.0-110.3 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 4.10.0-110.2 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 4.10.0-110.1 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix...

Oracle Linux 9 : fence-agents (ELSA-2026-19355)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19355 advisory. - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled...

SUSE-SU-2026:2627-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues - CVE-2026-48522: PyJWKClient passes URI arguments directly to urllib.request.urlopen and allows for SSRF and token forgery bsc1266798. - CVE-2026-48523: verifier-side algorithm allow-list bypass when jwt.decode or jwt.decodecomplete are...